Decentralized Supervisory Control of Discrete Event 
Systems for Bisimulation Equivalence ^ 

Yajuan Sun, Hai Lin, Ben M. Chen 

Department of Electrical and Computer Engineering, National University of Singapore, 

Singapore, 117576 



Abstract 

In decentralized systems, branching behaviors naturally arise due to communica- 
tion, unmodeled dynamics and system abstraction, which can not be adequately 
captured by the traditional sequencing-based language equivalence. As a finer be- 
havior equivalence than language equivalence, bisimulation not only allows the 
full set of branching behaviors but also explicitly specifies the properties in terms 
of temporal logic such as CTL* and mu-calculus. This observation motivates us 
to consider the decentralized control of discrete event systems (DESs) for bisimu- 
lation equivalence in this paper, where the plant and the specification are taken to 
be nondeterministic and the supervisor is taken to be deterministic. An automata- 
based control framework is formalized, upon which we develop three architectures 
with respect to different decision fusion rules for the decentralized bisimilarity 
control, named a conjunctive architecture, a disjunctive architecture and a general 
architecture. Under theses three architectures, necessary and sufficient conditions 
for the existence of decentralized bisimilarity supervisors are derived respectively, 
which extend the traditional results of supervisory control from language equiva- 
lence to bisimulation equivalence. It is shown that these conditions can be verified 
with exponential complexity. Furthermore, the synthesis of bisimilarity supervi- 
sors is presented when the existence condition holds. 

Keywords: Bisimulation equivalence, decentralized supervisory control, discrete 
event systems, nondeterministic systems. 
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1. INTRODUCTION 



A decentralized system is composed of many distributed and networked lo- 
cal agents, in which each local agent makes control decisions based on their own 
information and then forms a global decision to induce the system to achieve 
a desired behavior. Lots of physica l systems, such as communication systems 



(ICieslak et al.LI 19881) . (IRudie & WonhamLll990l). rnanufa ct uring systems ( Lin & Wonham . 



1988 ) and networked computer systems (jjenseni 1992 ). dperg uson et al.. 1996), 



are examples of decentralized systems. Therefore, the decentralized DESs con- 
trol problem has been received increasing attentions with growing engineering 
demands in recent years. 

The decentralized con trol of discrete event systems was firstly addressed by 



Rudie & WonhamI (Il992h under a C&.P (conjunctive and permissive) architec- 



ture. While some other works considered the decentralized supervision prob- 
lem by using different architectures. For example, a D&.A (disjii nctive and anti- 
permissive) architecture was presented in (|Yoo & Lafortunell2002b . which is com- 
plementary with the conju nctive architecture. To ge neralize the CScP architecture 
and the DSiA architecture, IYoo & Lafortund (|2002|) proposed a general architec- 
ture, which combines above mentioned two architectures. In (|Yoo & Lafortune . 



20041), a conditional arc hitecture was used for a llowing the controller to take con- 



ditional decisions. In (|Ricker & Rudiel l2000f) . a knowledge-based architecture 
was provided to associate the decision of the supervisor to a grade or level of 
ambiguity. B ased on these archite ctures, recent works i nvestigated the hierar - 



chical control (ISchmidt et all . l2008h. the reliable control ( Takai & UshioL l2000h . 



(|Liu & Lin , 2010l) and the commun ic ating control with (Park & Choi 120071) or 
without ( Barrett & Lafortune . 2000 ). ( van Sc huppenl 2004) communication de- 
lays for decentralized supervisory control of DESs. All these work employed lan- 
guage equivalence as the notion of behavior equivalence. However, the traditional 
sequencing-based language equivalence is not adequate for branching behaviors 
which naturally arise due to communication, synchronization, unmodeled dynam- 
ics and system abstraction. This calls for the development of a new decentralized 
supervisory control framework that can fully capture the branching information, 
while at the same time possesses a practical implementation complexity. 

In this paper, we adopt the bisimulation relation as the behavior equivalence 
between controlled system and specifications. As a finer behaviOT equivalence 
than langua ge equivalence, bisimulation was introduced by iMilneii (Il989h and 
P^ (ll98l'). since then it has been succe s sfully used in model checking (IClarkel . 



19971), software verification (IChaki et al.L |2004|) and formal analysis of continu- 
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ous (lAntoniotti et all. 120041) . (IDesharnais et alJ. 120021). (IKloetzer & BeltaL l2007h . 



( Tabuada & Pappasl . 2004 ). hybrid ( Haghverdi et al. , 2005 *) and discrete event sy s 
terns. More appealing, bisimulation allows the full set of branching behaviors 
and explic itly specifies the propert ies in terms of temporal logic such as CTL* 
(lEmersonL [1990) and mu-calculus jBasu & Kumarl [2006) while language equiv- 
alence only preserves the linear temporal logic (LTL)-a subclass of CTL*. This 
observation strongly motivates us to consider the decentralized control of DESs 
for bisimulation equivalence. 

The use of b isimulation for DE Ss subject to la n guage equivalence was ex- 
plore d in (Barre tt & Lafortunel . ll998|) . (|Ruttenl . ll999l) . ([Komenda & van Schuppen . 



2005 ). and (|Su et al.l . 12010). The control of DESs fo r achi e ving bisirnulatio n 
equivalence wa s studied bylMad.husudan & Thiagaraian ( 2002 ). Sun et al. ( 2011 ). 
iTabuada' dlool. iTabuadal tOOA Izhou & Kumaj (I2B07I) . Izhou & Kumad (I2OI ih 
and Liu et al.l (120 ll|) . It is worthy mentioning that all existing work on bisimula- 
rity supervisory control focused on the centralized control framework. 

To the best our knowledge, no prior work considered the decentralized con- 
trol of DESs for bisimulation equivalence. The contributions of this paper mainly 
lie on the following aspects. Firstly, a novel automata-based framework is pro- 
posed to address the decentralized bisimilarity supervisory control problem. For 
such a framework, all of the plant, the specification and the supervised system 
are modeled as automata and allowed to be nondeterministic. Accordingly, the 
decentralized bisimilarity supervisor is formalized by an automaton and a local 
decision map, in which the automaton dynamically tracks and synchronizes the 
behaviors of the plant and the local decision map determines whether enables the 
events defined at the state of the automaton or not. Based on different local deci- 
sion maps and global decision fusion rules, the decentralized bisimilarity control 
problem can be developed with three architectures-a conjunctive architecture, a 
disjunctive architecture and a general architecture. Secondly, to effectively imple- 
ment the proposed strategy, deterministic supervisors are our focus in this paper. 
We provide the necessary and sufficient conditions for the existence of bisimilar- 
ity supervisors for above three architectures respectively, which extends the tra- 
ditional results of supervisory control from language equivalence to bisimulation 
equivalence. It is shown that these conditions can be verified with exponential 
complexity. Furthermore, the obtained results illustrate that the conjunctive ar- 
chitecture is complementary with the disjunctive architecture (See Example 2 and 
Example 3) and both of them are special cases of general architecture (see Exam- 
ple 4), which coincides with the cases for language equivalence. Thirdly, when the 
existence condition holds, we also present the methods to design the decentralized 
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bisimilarity supervisors for the proposed three architectures. 

The rest of paper is organized as follows. Section 2 gives the preliminary. 
Section 3 presents the problem formulation. The decentralized bisimilarity con- 
trol problem for the conjunctive architecture, the disjunctive architecture and the 
generalized architecture are explored in Section 4, Section 5 and Section 6 respec- 
tively. Illustrative examples are provided in Section 7. The paper concludes with 
section 8. 



2. Preliminary 

A nondeterministic DES is modeled as an automaton G = (X,'Z,xo,a,Xm), 
where X is the set of states, E is a finite set of events, or : X x 2 — > 2^ is the 
transition function, xq is the initial state, and X^ Q X is the set of marked states. 
The active event set at state x is defined as Edx) = {cr e S | a{x, cr) is defined}. 
Let S* be the set of all finite strings over E, including the empty string e. The 
transition function a can be extended to a : X x 1,* ^ 2^ in the natural way: 
a(x, e) = x; a(x, scr) = a(a(x, s), cr) for s e and cr e 2. If the transition 
function is a partial map a : X x 1, ^ X, the DES is said to be deterministic. 
Given a string s e E*, \s\ is the length of the string s. The language generated by 
G is defined as L(G) = {5 e S* | a(xo, s) is defined}, and the marked language is 
defined as L,„{G) = {5 6 Z* | a{xQ, s) n X,n 0}. The event set can be partitioned 
into S = E„f.UEc, where S„c is the set of uncontrollable events and is the set of 
controllable events. Under partial observation, it can be also partitioned into E = 
Z„oU2o, where is the set of unobservable events and is the set of observable 
events. When a string of events occurs, the sequence of observed events is filtered 
by a projection P: S* — > Z*, which is defined inductively as follows: P{6) = e, 
for cr 6 E and s e 2*, P{so-) = P{s)o- if cr 6 E„, otherwise, P(s(t) = P{s). 
Consider a language K. The prefix closure of K, denoted as K, is the language 
K = {s e 1:* \ {3t e 2*) st e K}. The Kleene closure of K, denoted as K*, is 
the language K* = U^evsK", where = e and for each n > 0, K"^'^ = K"K. For 
a nondeterministic G, let det{G) be a minimal deterministic automaton such that 
L{det{G)) = L(G) and L,„(det(G)) = L,„(G). 

To synchronize the automa ta, the product operator is introduced as below 



(|Cassandras & LafortuneL 120081) . 



Definition 1. Given Gi = {Xi,'L,xoi,ai,Xmi) and G2 = (X2, S, X02, Q'2,^m2), the 
product of Gi and G2 is an automaton 

G1IIG2 = (Xi X X2,'^,ai\\2,iXoi, XQ2),Xml XXml), 
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where for xi e Xi, & X2 and cr 6 S, the transition function is defined as: 



/ aiixucr) X 

0'l||2((-^l,^2),Cr) = i 



ai(xi,o-) X a2(x2, cr) cr e Egi(xi) D Eg^{x2)\ 

otherwise. 



In the conventional supervisory control problem, language controllability (|Ramadge & WonhamL 



19841) is a necessary and sufficient condition for the existence of a supervisor that 
achieves language equivalence between the supervised system and the specifica- 
tion, and it is captured by the following definition. 

Definition 2. Consider an automaton G = (X, 2, Xcc, where 2„c c 2 is 
the set of uncontrollable events. A language K c L(G) is said to be language 
controllable with respect to L{G) and S„c if 

n L{G) c K. 

Bisimulation is a finer behavio r equivalence than language equivalence, which 
is stated as follows (* Milnei . 1989 ). It is well known that bisimulation equivalence 



implies language equivalence and marked language equivalence, but the converse 
does not hold. 

Definitions. Given Gi = xoi,«i,^mi) and G2 = (^2,2, JCo2,«2,^m2), a 

simulation relation ^ is a binary relation c Xi x X2 such that {x\ ,X2) & (p implies 

(1) (Vcr e I)[Vx'j e ai(xi,cr) => e Q'2(-^2, cr) such that (x\,x'^) e 0]; 

(2) xi e X,„i => X2 G X„j2. 

The automaton Gi is said to be simulated by G2, denoted by Gi <0 G2, if there 
is a binary relation (pQXi XX2 such that (xqi , X02) e (p. For c (X^ UX2)x(Xi UX2), 
if Gi <^ G2, G2 <t/, Gi and ^ is symmetric, is called a bisimulation relation 
between Gi and G2, denoted by Gi =0 G2. We sometimes omit the subscript 
from <^ or =^ when it is clear from the context. 



3. Problem Formulation 

A nondeterministic system G is jointly controlled by n local supervisors Si,S2 
• • • Sn for achieving the bisimulation equivalence between the supervised system 
and the given nondeterministic specification R. A priori information available to 
each local supervisor includes the desired behavior R and the decision fusion rule 
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to form a global decision. Further, each local supervisor can observe the locally 
observable information and control the locally controllable events. 

Denote E^, and 'Lud as the sets of locally controllable and uncontrollable events 
respectively; Eo, and as the sets of locally observable and unobservable events, 
respectively, where / G / = {1,2, • • • The sets of globally controllable and 
globally observable events are defined as E,, = U,6/Sc/ and E,, = Ujg/Eo, re- 
spectively. Then, 2,,^ = E - is the set of globally uncontrollable events and 
l^uo = 2^ - is the set of globally unobservable events. 

The local supervisor Si is defined as a tuple 

Si = (Si,i/rd, (1) 

where Si = (Yi,I.,fii,yoi, Y^i) is an automaton with F^^; = 7,- and (A, : Yi 2^ 
is the local decision map. 

It can be seen that a local supervisor consists an automaton S , and a local deci- 
sion map 1/^,, in which S , dynamically tracks and synchronizes the behaviors of the 
plant and 1/^, determines whether enables the events defined at the state of S , or not. 
A local supervisor is called to be nondeterministic if 5, is nondeterministic, oth- 
erwise, it is called to be deterministic. To reduce the implementation complexity, 
local supervisors adopted in this paper are assumed to be deterministic. 

Because a local supervisor possesses limit control and observation capabili- 
ties, an admissible local supervisor should satisfy the following properties. 

Definition 4. Consider a local supervisor Si = ((Yi, l.,/3i, yoi, Y^d, ^d- Then, 

• Si is called Smo; - compatible if Vj 6 7,- and Vcr e E„o,-, fii(y, cr) = y; 

• Si is called i;„ci - compatible if Vy e F,- and Vcr e J3i(y, cr) i: 0; 

• Si is called (Luoh'^ud) ~ compatible if it is - compatible and - 
compatible. 

That is, a 2„„; - compatible local supervisor does the same control actions 
for the indistinguishable events and a lluci - compatible supervisor defines local 
uncontrollable events at each state of the automaton. 

Further, the decisions from local supervisors can be synthesized through the 
decision fusion rule, which is stated as follows. 
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Definition 5. Givenlocal supervisors <S,- = (S,-, i/^,) with ||,e/5; = (Yn,!., fin, yon, Fmy), 
where i e I, the decision fusion rule <A/ is defined as 

iA/:y||^r:={re2^:i:„, cy}. (2) 

Then, the decentralized bisimilarity control of discrete event systems can be 
classified with respect to different decision fusion rules. 

In the rest of this paper, we will use G = {X, S, a, xq, X,„), R = (Q, S, 6, qo, Qm), 
Si = (Si,iJ/i) = ((Yi,'L,/3i,yoi,Y^i),iJ/i) and = {Yii,I.,j3ii,yo\\,Y„,n) to denote 

the nondeterministic plant, the nondeterministic specification, the local supervisor 
and the product of 5, respectively unless otherwise stated. 

3.1. Conjunctive Architecture 

In the subsection, a conjunctive decision fusion approach is presented for syn- 
thesizing decisions of local supervisors. 

For a conjunctive architecture, a local supervisor Sj enables E \ by default, 
i.e., Z \ Zc, c ifriiy) for any y e 7;. Then, the conjunctive decision fusion rule is 
expressed as follows. 

Definition 6. Given local supervisors Si = (S ,-, iffi) with ||,g/S = (Fn, yo\\, Ym\\), 
where / e /, the conjunctive decision fusion rule i//fc : Yi\ — > 2^ is defined as 

^fciyuyi, ■■■ ,yn) = ^m^iiyd- (3) 

In the conjunctive architecture, CScP co-observability is the key property for 
the existence of a set of lo cal supervisors to control the plant to be language equiv- 
alent to the specification (IRudie & Wonhaml . ll992() . 

Definition 7. Given a plant G, a language K Q L{G) is said to be CSlP co- 
observable with respect to L{G), and l^ci, where i e I, if for any s e K and 
cr e 2c such that scr e L{G) \ K, 

{3i e I)[(Pj'Pi(s)cr nKi^Q)Aicre (4) 

3.2. Disjunctive Architecture 

This subsection introduces a disjunctive architecture, in which a disjunctive 
decision fusion rule is employed for the supervisor decision synthesis. 

For such a disjunctive architecture, a local supervisor Si disables 2 \ by 
default, i.e., 2 \ E,, n ifftiy) = for any y e Yj. And the disjunctive fusion rule is 
presented as below. 
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Definition 8. Givenlocal supervisors <S,- = (S,-, i/^,) with ||,e/5; = (Fn, S,/3||,3;o||, l^m||), 
where i e I, the disjunctive decision fusion rule i/ffd : Y\\ — > 2^ is defined as 

tf'fdiyiryi, ■■■ ,yn) = ^ieiipiiyd- (5) 



Then, we state the notion of DSlA co-observability (|Yoo & Lafortunel 120021) . 
which guarantees the existence of decentralized language equivalence enforcing 
supervisors with a disjunctive structure. 

Definition 9. Given a plant G, a language K Q L(G) is said to be D&A co- 
observable with respect to L(G), So, and where i e I, if for any s e K and 
cr G 2c such that scr e K, 

(3i e I)[(iPj'Pt(s) n K)o- n L(G) c a (tr e (6) 

3.3. General Architecture 

In the general architecture, the event set is further partitioned into = 
See U ^c^/j where l^ce is the set of controllable events which is enabled by default in 
local decision and is the set of controllable events which is disabled by default 
in local decision. That is, a local supervisor Si for a general architecture satisfies 
See \ ^ ^iiy) and Serf \ 2^,- H i/^iCv) = for any y e 7,-. Denote 
and lej,- = n Serf- 
Further, the decision fusion rule of the general architecture is captured by the 
following definition. 

Definition 10. Consider local supervisors St = (5,-, i/f,) with ||ie/5,- = (Yn, S,/3||,yoi|5 Ym\\), 
where / g /. The generalized decision fusion rule if/fg : Y\\ — > 2^ is defined as 

^fgiyuyi, ■■■ ,yn) = P^J^iei^fyd] u P^^.A^ieiipi{yi)] u z„e, (7) 

where P^,., : 2* ^ 2*e and Pj^ ^ : 2* ^ S*^ are projections. 

With this general architecture, the following concept is used as the existence 
condition for decentralized supervis ors to achieve the langua ge equivalence be- 
tween the plant and the specification (lYoo & Lafortunell2002h . 

Definition 11. Given a plant G, a language K Q L{G) is said to be co-observable 
with respect to L(G), So/ '^cd and 'Lcdu where / 6 / if 

(1) ^ is CSlP co-observable with respect to L(G), and Zee, for i 6 /; 
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(2) K is DSlA co-observable with respect to L{G), So, and 'Lcdi for / e /. 

Next, the decentralized supervised system for bisimulation equivalence is in- 
troduced as below. 

Definition 12. Consider a plant G = {X, Z, a, xq, X^), a specification R = {Q, S, 5, qo, Qm), 
local supervisors Si = (Si,i^i) with WiejS ,■ = (Fn, joih i^mii) and a decision fu- 
sion rule ifff, where / 6 /. The supervised system cliei(S i, il/i)l^i,^G is defined as an 
automaton 

clieiiS u ^dUfG = iX\ S, a', Xg, Xj, (8) 

where X' QXxY\\h the set of states reachable from the initial state x'^ = (xq, yo\\), 
X'^ Q X„r\ y^ii and the transition function a' : X' x S* — > 2^' is defied inductively: 

(1) (x,y) e a'(x'Q,o-) <^ x e a{X(),cr) ^y e p\\{yQ\\,cr) Acre iA/Cyoii); 

(2) If (x,y) e a'(x'f^,s), then {x',y') e a'{{x,y),cr) « ^ e a{x,(r) A y' £ 
l5\\{y,(T) Act e i]/f{y). 

The decision fusion rule ipf can be in terms of i]/fc @, ^fd ® or i]/fg (|7]). 
Therefore, the supervised system can be adopted for all of the conjunctive archi- 
tecture, the disjunctive architecture and the general architecture. Moreover, this 
supervision framework can be easily implemented as below. When a certain event 
occurs in the plant, the automata of local supervisors will update to new states 
based on their own observation. At these states, local decisions are made and then 
fuse a global decision which will be delivered to the plant through a communica- 
tion channel to enforce a desired behavior. 



Remark 1. With respect to langua ge equivalence, the supe rvise d system is de- 
fined inductively based on strings in mudie & WonhamL \l992^) and ^Yoo & Lafortune 



2002^) . In this paper, bisimulation equivalence is our focus, and it allows the non- 



determinism of the plant, the specification and the supervisor. Thus, we general- 
izes the string-based description to the automata-based description. 

Based on the proposed frameworks, this paper aims to tackle the following 
decentralized bi similarity control problem: 

Given a plant G and a specification R modeled as nondeterministic discrete 
event systems with L(R) c L(G), does there exist a set of(JLuoi, ^ucd - compatible 
supervisors Sj = (Si,i//i) where i e I such that cli^iiS i,if/i)/^f.G = Rfor the con- 
junctive architecture (4'f = ^fc), the disjunctive architecture (ij/f = if/fd) and the 
general architecture (ij/f = ij/fg) respectively? If so, how to construct Sj? 
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4. Conjunctive Architecture 

The decentralized bisimilarity control problem under the conjunctive archi- 
tecture is investigated in this section. From ([T]) and Definition [121 of the previous 
section, we can see that the marking only depends on the plant because the decen- 
tralized bisimilarity supervisor plays no role in the marking. Thus, the following 
concept is introduced to guarantee the existence of decentralized bisimilarity su- 
pervisors. 

Definition 13. Given a plant G = (X, 2, a, xq, X,n) and a specification = (Q, Z, 6, qo, Qm) 
with L(R) c L(G), R is called to be marked language closed with respect to G if 

(V^ e Lmis e L„,(G) ^ s e LMl (9) 

Then, the following theorem presents a necessary and sufficient condition for 
the existence of (S„o,, - compatible bisimilarity supervisors under the con- 
junctive architecture. 

Theorem 1. Given a plant G = (X, S, a, xq, X^) and a specification R = (Q,'L,6, qo, Qm) 
with L(R) c L(G), there exist (Luoi,'^uci) - compatible supervisors S, = (5,, (A,) 
with the conjunctive decision fission rule tf/fc such that cliej(S j, i//i)/^^.^G = R if and 
only if the following conditions hold: 

(1) There is a bisimulation relation (p such that G\\det{R) =^1, R; 

(2) L(R) is language controllable with respect to L{G) and S„c; 

(3) L(R) is C&P co-observable with respect to L{G), and So,-, where i e I; 

(4) R is marked language closed with respect to G. 

Proof. Consider det{R) = (Z, S, 6z, {qo}, Z,n) and G\\detiR) = {Xxz, 2, axz, (xq, {qo}), X^xz)- 

(Necessity) Let Si = (5 i//i)=i(Yi, yoi, Y,„i), ipi ) and ILe/S = (Fn, 2,/3||, joii, Ym\\), 
where / e /. Because there is a bisimulation relation 0' such that c/;g/(5,-,(/f,)/^^^G 
R. We have L(cZ,e/(5 (A,)/^,,G) = L{R) and L„,(c/,e/(S iPdU, G) = L,„{R). 

We firstly prove that L{R) is language controllable with respect to L(G) and 
For any s e L{R) and cr e 2„c such that scr e L(G), there is x e q:{xq, s) 
with x' e a(x,cr). Because s e L(R) = L{cli(^i{S ^^G) and WieiSi is deter- 
ministic, there exists {x,{y\,y2, ■ ■ ■ e a'{x[y s). Because cr e we have 
a e 4ffciy[,y2, ■ ■ ■ ,yn) = ^iei^iiyd- Moreover, St is 2„c! - compatible, which im- 
plies jiiiji, 0-) i^Q for / G /. Thus, there is (y[,y2, ••• ,y'J e /3ii{(yi,y2, • • • ,yn), cr) 
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such that (jc', (y\,y2, • • • , j',)) e a'{(x, (yi,y2, • • • ,yn)), cr) according to Definition 
[HI Therefore, scr e L(cliei(S i,(^i)/^^G) = L(R). 

Secondly, we check C&P co-observability of L{R) with respect to L{G), 2c,- 
and 2o(, where i g /. Assume that there is s e L{R) and cr e satisfying scr e 
L{G)\L(R), moreover, either cr ^ Z„ or PT^Pi(s)cr n L(R) ^ for any i e I. For 
any j e I satisfies cr e Z^y and P~.^Pj{s)cr Pi L(7?) 0, there exists s' e L{R) such 
that P/^) = Pj{s') and 5'cr e L(7?). Because L{R) = L{cliei{S i, ipdl^fG), we have 
s'a 6 L(cliei(S i,if/i)/^j.^.G). Then, there exists (ji, j2 • • • Jn)) 6 a'(xQ,s') such 
that(x',y) 6 a'CC-^^ J2 • • •yn)),cr). By Definition [T2l and (131). we have cr e </^,-Cv,) 
for / e /. Since 5 e L(R), we have 5 g L(cliei(Si, i/^O/^^^ G). In addition, scr e L(G). 
Hence, there is x" e a(xo, s) such that (x", (y",y2, • • • ,y'^)) g ^'(jCq, s) and x'" G 
Q:(x",cr). Because ||ie/5; is deterministic and <S,- is 2„o,- - compatible, if = 
Pi(s'), we have yS,(joM = ACJom s'), where P,- : E* —> Z*^. is the projection. For 
/ G /, either cr ^ or = y". Furthermore, Sj is - compatible. Then, there 
is /" G yS||((y;',y^', • • • ,y::), 0-) such that (x'",y'") G (y'^^z ' ' ' ' '3^"))' '^)- 

It implies scr G L{clisj{S i,il/i)/^^^G) = L(R), which contradicts that scr i L(K). 
Therefore, the assumption is not correct. Hence, L(R) is CSlP co-observable with 
respect to L(G) and E,., and S,,;. 

Thirdly, we verify that there is a bisimulation relation (p such that G||Je?(i?) =^ 
R. From the definition of product, we have L{G\\det{R)) = L(G) n L(det(R)) = 
L{R). Thus, L(c/,e/(5;,iA,)/^,,G) = L(i?) = L{G\\detm. Let 0i = {((x,z),^) G 
XxzX Q\^s G L(i?) s.t. G axziixoAqo]),s), q G (5(<?o, y £ ;0||CVo||, 

and ((x,};),^) G 0'}. For any ((jc,z),^) G 0i, if there is a cr-successor (.sc',z') G 
axzCC-^^z), cr), where cr g S, we obtain scr e L(R) = L{cliei{S ^il/dl ^f,G) and 
x' G a{x, cr). Because of the determinism of ||ie/5,, there is y G li\\{yo\\, s) such that 
y' G Pwiy, cr). It implies {x' ,y') e a'{{x,y), cr). Then, there exists q' G 5{q, cr) such 
that ((x', /),<?') G 0'. Hence, ((jc',z'),<?') e 0i- If {x,z) g X,„xz, then x e X^, 
which implies {x,y) e X'^. Therefore, q e Q,„. For any {q,{x,z)) g if 
there is a cr-successor q' G 6{q,a), where cr g S, we have (jc',/) g a'{{x,y),a) 
such that ((x',/), ^') G (j)' because {ix,y),q) e <p' . Thus, x' e a{x,cr). Further, 
scr G L(R) implies that there exists z' g 6ziz, cr) by the definition of det{R). Thus, 
ix',z') G ci'xz((-«,z),cr). Hence, iq',ix',z')) g 0]"^ If G Q„„ then z G Z„, and 
X G Therefore, (x,z) g X„,xz- As a result, G\\det(R) =^^u^-' R. 

Fourthly, we would like to prove that R is marked language closed with respect 
to G. For any s e L(R), we have s e L(cliei{S i,il/i)^jJG). If s e L,„{G), there is 
X G X„i such that x G a(xo,s). Since s G L(cliei(S i,if/i)^^JG), we obtain 5 G 
L,n(cliei(S i, iJ/d^fJG), which implies 5 G L^{R). 

(Sufficiency) Let [5], := {s'\Pi{s) = Pi{s')} for the projection : E* ^ E^^.. 
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For z e I = {1,2,- ■■ ,n]. Si = iiYi,'L,/3i,yoi,Y,r,i),il/i) is designed as follows: 
Yi = {Zdi} U Mi I s € L(R)}, yoi = [f],-, Y^i = Yi and for any yi e 7,- and cr 6 2, the 
transition function fii is defined as: 



fiiiyi, cr) = - 



(undefined) 



([scr]i) 

(Zdi) 



yi = [s]i Ao-e -Loi A [sla n L{R) ^ 0; 
yi = [s]iA(Te 
(yi = [s]i Acre S„„- \ S„«,- A [slcr n L{R) = 0) 

V(y; = Zdi A cr G 2„o; U 2„,,-); 



(10) 



Further, for any e F, 



the local decision map i/',(y,) is defined as: 



( 



(Z, \ 2„- U U {cr 6 | 3*' e /cr 6 L{R)}) yi = [si; 

(Zc \ ^ci U Z„c) = Zdi- 



(11) 



Therefore, iS, is (Z„„,, Z„n) - compatible and i/f, satisfies the requirement for 
the conjunctive architecture. Let i/cy^ © be the conjunctive decision fusion rule. 

Firstly, we would like to prove that s e L{R) for any s e L{cliei{S i,il/i)l ^^fi) 
by the induction method. (1) \s\ = 0, that is, s = e. We have e e L{R). (2) Suppose 
that s e L{R) for any s e L(cliei(S i,ifri)^fJG) when \s\ = n. (3) \s\ = n + I 
with s = Sicr. Assume that 5icr ^ L{R). Since 5icr e L{cliei(S i,if/i)i/,j.JG), 
there is (.jc, (ji, j2, • • • e q:'(.jc,'), 5i) and cr e 2 such that (x', (y[,y2, • ■ • ,y'J) e 
a'((x,(yi,y2, ■ ■ ■ ,y„)),cr). Then^icr e L(G) and cr e tf/fciyuyi, ■■■ ,yn) = (^iei^iiji) 
We have the following cases. Case 1: cr e 2„c. Because \s\\ = n, we have 
si e L{R). Then, i'lcr e L(i?) since L(i?) is language controllable with respect to 
L(G) and 2„c. Thus, there is a contradiction. Case 2: cr e 2^. Since Si e L(i?), we 
obtain = [^i], for z e / by the definition of jS, and si e L(R). According to (fTTI) . 
either cr ^ 2c, or there is s\ e [si]i such that s\o- e L{R), which violated the C&P 
co-observability of L(R) with respect to L(G), 2o, and 2c,-, where i e /. Therefore, 
the assumption is not correct. Hence, 5icr e L(R). 

Secondly, the induction method is also used to verify s e L{cli^i{S i,i}/i)l ^^G) 
for any s e L(R). (1) \s\ = 0, that is, s = e. We have e e L{cliei(S i,if/i)/^j.fi). 
(2) Suppose that s e L{cliei{S i,if/i)/if,^.fi) for any s e L(R) when \s\ = n. (3) 
\s\ = n + I with s = sicr. Since 5icr e L(7?), we have 5icr 6 L(G). Then, 
there is x e a{xo,si) such that x' e q'(jc, cr). Moreover \si\ = n, we obtain 
^1 e L{cliei(Si, il/i)I^^G). Because |Lg/S,- is deterministic, there is Cvi,y2, • • • e 
jSiiCvoii,*!) such that {x,{yi,y2,- ■ • ,y„)) e q-X^q,^!). For i e I, we have j,- = 
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[si]i because Sicr e L{R) and the definition of fij. Then, we obtain the fol- 
lowing cases. (1) cr e Because of Z„c,- - compatiblility of Su we have 
/3i(yi,o-) 4^ 0. Further, a e if/i(yi) since cr e Thus, there is (y[,y2, ••• ,y'J e 
/3\\((yuy2,--- ,yn),o-) such that (x',(y[,y'2,--- ,y'n)) e a'{(x,(yi,y2,- • • cr). 
Hence, sicr e L{cliei(S i, ij/dl^ffi). (2) cr e S^- If cr e 2„o,-, then [^i],- e o")- 
If cr ^ then [s\cr]i e cr) because Sicr e L(R). Thus, there exists 

(/pJi'"' 'K) s /3||((yi,y2, ••• ,yn),o-). Since ^jcr e L(7?), either cr i S,,- or 
PT'Pi(si)crnL{R) + 0. Therefore, cr e n;e/(A,(jO = (A/c Then, {x\{y\,y\, ■ ■ ■ ,>;)) e 
a'((^, Cvi, J2, ■ ■ ■ ,y«)), cr) which implies ^icr e L(cliei(S t, ij/dl^ffi). 

Thirdly, we would like to verify the existence of a bisimulation relation be- 
tween the supervised system and the specification. Because there is a bisimu- 
lation relation such that G\\det{R) =^ R, we have L(G\\det(R)) = L(R). In ad- 
dition, we know that L(c/ie/(5/, (/f,)/^^^G) = L(R). Thus, L(c/,e/(5i,i/c,)/^^^.G) = 
L{G\\det{R)) = L{R). 

Let 01 = {((x,y),q) \ 3s e L{R) s.t. y e j3ii{yo\\,s), x e a{xQ,s), q e 6{qQ,s), 
z e 5^{\qo\, z) and {{x, z), q) e (p]. For any {{x, y), q) e (py, if there is a cr-successor 
{x' ,y') e a'((x,y),(T), where cr e S, we obtain scr e L{cli^i{S I ^^G) = L{R) 
and x' 6 a{x, cr). Thus, there exists z' e 6J^z, cr) by the definition of det{R). Then, 
{x' ,z') 6 axz{ix,z),cr). Because {{x,z),q) e 0, there exists q' e 6(q,cr) such that 
{(x',z'),q') 6 0. Therefore, ((x',y'\q') e (pi. If (jcj) 6 X,;, then jc G X^. It 
implies 5 6 L,„iG). Because R is marked language closed with respect to G, we 
have s e L^iR). Then, z & Z,„. Hence, (x,z) e X^xz which implies q e Q^- For 
any (q, (x,y)) e if there is a cr-successor q' e 6(q, cr), where cr e Z, we have 
(x',z') G axz((x,z),cr) such that ((.)c',z'),^') e because ((x,z),q) e 0. Then, 
y G Qr(x, cr). Further, scr e L(R) = L(cliei(S i,iJ/i)/^^.^.G), there exists (jc',}'') € 
a'{{x,y), cr) because of the determinism of ||,g/5,-. Hence, (q', {x',y')) e cp'^.lfq e 
Q^, then x e X^. Therefore, (x,y) e X'^. As aresuh, ch^iiS uipdl ^^.G =^,^4,-' ^■ 

Remark 2. Intuitively, condition (1) depicts that the nondeterminism of the plant 
allowed by the deterministic controller should be equivalent to the nondetermin- 
ism of the desired specification. In addition, bisimulation implies not only lan- 
guage equivalence but also marked language equivalence, i.e. Lm(cliei(S i,ipi)/^^^G) ■■ 
Lm(R), therefore, condition (4) is required in bisimilarity control. IfR is trim, then 
the obtained supervisors are nonblocking. Furthermore, condition (1) always hold 
when both the plant and the specification are deterministi c. Hen ce, the decentral- 



ized control for language equivalence nRudie Gr Wonhani \199^} is a special case 



of the decentralized control for bisimulation equivalence. 
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Remark 3. Except condition (4), which is needed in Theorem 1 because the mark- 
ing relies only on the plant in the proposed framework, conditions (1), (2) and (3) 
of Theorem 1 for the dece ntralized bisimilarity control can be reduced to those are 



in nZhou & Kuman \2011\} for the the centralized bisimilarity control when n = I. 
Therefore, the result for the centralized framework of bisimilarity control is a spe- 
cial case for the decentralized framework of bisimilarity control in this paper. 

Remark 4. From the sufficiency part ofTheoremU} it is shown that decentralized 
bisimilarity supervisors can be designed according to diOl) and f l77]) when the 
necessary and sufficient condition has been satisfied. 

Remark 5. To obtain the computational complexity of verifying the existence 
condition of decentralized bisimilarity supervisors for the conjunctive architec- 
ture, we examine the conditions of Theorem\l\item by item. (1) G\\det{R) =^ R. 
Since both the plant and the specification are nondeterministic, their numbers of 
transitions are C)(|Xp|S|) and respecti vely. Moreover, det(R) is deter- 



ministic with 0(2'2'|2|) transitions. According to »FemandeA \1990 ). the complex- 
ity of checking G\\det{R) =^ R is 0(|X|22iei'|2|/o^(|X|2iei)). (2) L(R) is language 
controllable w ith respect to L(G) and wh ich can be tested with complexity 



0{\X\^\Q\^\'Z\) ( Cassandras & Lafortune 200^) . (3) L(R) is C&P co-observable 



with respect to L{G), and ILoi, where i e /. It can be verified by polynomial 
complexity with respect to \X\ and \Q\. (4) R is marked language closed with re- 
spect to G. By checking the states ofG\\R, the condition (4) can be tested with 
complexity 0(\X\\Q\). Therefore, the computational complexity of verifying the 
conditions of Theorem [7] is C)(|Xp2'2' |2|Zo^(|X|2'2l)), which is exponential with 
respect to \X\ and \Q\. 



5. Disjunctive Architecture 

In this section, we study the decentralized bisimilarity control under the dis- 
junctive architecture. As below, the existence result for the disjunctive architecture 
is presented. 

Theorem 2. Given a plant G = (X, S, a, xq, X^) and a specification R = (Q,'L,6, qo, Qm) 
with L(R) c L(G), there exist decentralized (£„o,-, - compatible supervisors 
Si = (Si, ifji) with the disjunctive decision fusion rule ij/fd such that clt^iiS t, i//i)/^j:jG = 
R if the following conditions hold: 

(1) There is a bisimulation relation (f) such that G\\det{R) =0 R; 
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(2) L(R) is language controllable with respect to L{G) and lluc,' 

(3) L(R) is D&A co-observable with respect to L(G), l^ci and Zo„ where i e /. 

(4) Ris marked language closed with respect to G. 

Proof. Let det(R) = (Z, 2, 6z, {qo}, Z^) and G\\det(R) = (Xxz, 2, axz, (xo, {<?o}), X,nxz)- 

(Necessity) Consider 5,- = (5,-, (A,) = ((Yi, l^^puyou (AO and = {Y\\, i:,p\\,yQ\\, r^n), 
where/ e /. Because there is a bisimulation relation^' such that c/,g/(5,-,(/f,)/i/,^yG 
R. We have L(cliei(S t, ij/dl^ffi) = L(R) and LmicheAS i, ipdl^ffi) = Lm{R). 

Firstly, we prove that L{R) is language controllable with respect to L(G) and 
Z„c. For any s e L(R) and cr e such that scr e L(G), there is x e a(xo, s) 
with x' 6 a(x,cr). Because s e L(R) = L(cl,-ei(S ,;il^i)/^fdG) and WieiS i is de- 
terministic, there exists (x,(yi,y2, ■ ■ ■ e a'(x'f^,s). Because cr e we 
have cr e ^fdiji^yi, • • • ,yn)- Moreover, Sj is - compatible, which implies 
ACVi, cr) for i e I. Thus, there is (y[,y2, ••• ,y'J e /3||((yi,y2, • • • ,y«), o-) such 
that {x',(y\,y'2, ■ ■ ■ ,y'„)) e a'{(x,(yuy2, ■ ■ ■ ,j„)),cr) according to Definition [HI 
Therefore, scr e L^cheAS ^^.fi) = L{R). 

Secondly, we verify DSlA co-observability of L{R) with respect to L(G), 
and l^oi for i e I. Assume that there is e L(R) and cr e satisfying scr e 
LiR), moreover, either cr ^ 2„ or (/'7i/',(5) n L{R))o- n L(G) ^ L(i?) for any 
/ 6 /. Then, either cr t or there is s' e 2* such that Piis) = Pi(s') and 
s'cr 6 L(G)\L(R) for / e /. Because scr e L(R), we have scr e L{cli^i{S i, 
Then, there exists {x,{yy,y2 ■ ■ ■ ,yn)) £ (x'{x'q, s) such that {x' ,{y\,y'2 ■ ■ ■ ,y[J) G 
a'{{x, (ji, j2 • • • ,yn)), cr). According to Definition [H] and ©, (y'l, ' ' ' '3^^) ^ 
j2 ■ ■ ■ ,Jn),cr) and there exists i e / such that cr e Scc and cr e ^iiyd- 
Because ^•'cr e L(G) and i'' e L{R) = L{cliei{Si,il^i)liPffi, there are x" e cC^o, ■5'') 
and (y'l', ' • • • '3^") ^ y8||(yoi|, ^') such that {x" , {y'l,y2, ■ ■ ■ , J,'/)) e «'(^o, s') and 
jc'" e a(x",cr). For z e /, if cr e we have Pi{s) = Piis') with j,- = y'/ 
because of - compability of <S;. Therefore, either cr i E„ or = for 
z e /. It implies cr e ^i^i^iky'l). Furthermore, iS, is 2„c, - compatible. Then, there 
is 0^;",);^", ■ ■ ■ ,j;") e y8||((jr, j^', ■ ■ ■ ,j;'),(r) such that (x'", (y/',};^", • • • ,<')) G 
a'{ix",{y'{,y'{,--- ,y';,)\cT). It implies /cr e L{ch^j{S Ml^^fi) = LiR), which 
contradicts that s'cr ^ L(7?). Therefore, the assumption is not correct. It implies 
L{R) is D&A co-observable with respect to L(G) and and S^,. 

Thirdly, we would like to prove that there is a bisimulation relation cp such 
that G\\det{R) =^ R. From the definition of product, we have L{G\\det(R)) = 
L(G) n L{det{R)) = L{R). Thus, L(cliei(S 1,1^/1) /^^,G) = L(R) = L{G\\det(R)). Let 
01 = {((x,z),q) e Xxz X 2 I 3* G L(R) s.t. (x,z) e axz((xoAqQ}),s), q g 6{qQ,s), 
y G /3i\(yo\\, s) and ((x,y),q) e 0'}. For any ((x,z),q) g 0i, if there is a cr-successor 
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{x',z') e axz(ix,z),cr), where cr e Z, we obtain scr e L(R) = L{cliei{S i,iJ/i)/^^jG) 
and x' e a(x,cr). Since ||,(=/5; is deterministic, there is y e /3\\(yo\\,s) such that 
y' e /3\\(y, cr). It implies (x',y') e a'((x,y), cr). Then, there exists q' e 6(q, cr) such 
that ((x',y'),q') e 0'. Hence, ((x',z'),q') e 0i. If (x,z) 6 X^xz, then e Z^, 
which implies e Therefore, ^ e Q,„. For any (x, z)) e if there 
is a cr-successor q' e 6(q,(T), where cr e 2, we have {x',y') e a'{{x,y),cr) such 
that ((x',y'),q') e 4>' because {{x,y),q) e 0'. Further, scr e L{R), there exists 
z' 6 6z{z,(t) by the definition of det(R). Thus, 6 axz{{x,z),cr). Hence, 

(q',(x',z')) ^ (pi^- If ^ e Qm, then z & and x e X^. Therefore, e X^xz- 
As aresuk, G||(ie?(i?) =0,u0-i 

Similar to Theorem [H we can also prove that R is marked language closed 
with respect to G. 

(Sufficiency) We construct Si = (Si,if/i) = ((Yi,'L,/3i,yoi,Y,„i),if/i) as follows. 
The automaton S , is as the same as (flOl) and for any e F,, the local decision map 
(//iiyt) is defined as: 



It can be seen that Si is l-uci) - compatible and i/^, meets the requirement 
of the disjunctive architecture. Let ipfd © be the disjunctive decision fusion rule. 

Firstly, we prove that s e L(R) for any s e L{cli^i{S i, iffi)/^^.jG) by the induction 
method. (1) \s\ = 0, that is, s = e.We have e e L(R). (2) Suppose that s e UR) for 
any s e L{cliei{S i,i]/i) I ^^.fi) when \s\ = n. (3) \s\ = n + I with = s^a. Assume 
that sia i L(R). Since s^cr e L(cliei(S i,if/i)/^^jG), there is (.x:,Cvi,y2, • ■ • ,yn)) g 
cir'(.«o,*i) and a- e 2 such that ix',(y\,y2,- ■ ■ ,yn)) e a'((x,(yuy2,- ■ ■ ,yn)),cr). 
Then, 5icr e L(G) and cr e ^iei^Piiji) = ^fd{y\,y2, ■ ■ ■ ,yn)- We have the following 
cases. Case 1: cr e S„c. Because = n, we have si e L{R). Then, 5icr e L(R) 
since i'lcr 6 L(G) and L(i?) is language controllable with respect to L(G) and Sue- 
Thus, there is a contradiction. Case 2: cr e E^. Since si 6 L(7?), we obtain 
yi = for i e I by the definition of /3, and e Because cr e Dieii/fiiyi), 

there is / e / such that ([^i], n L(i?))cr n L(G) c L(i?). Therefore, 5icr e L{R), 
which introduces a contradiction. Then, the assumption is not correct. Hence, 
sio- e L(R). 

Secondly, the induction method is also used to prove that s e L(cliei(S i]/i)l^ffi) 
for any s e L(R). (1) \s\ = 0, that is, ^ = e. We have e e L{cliei{Si, if/dl^ffi). (2) 
Suppose that s e L(clisj(S i, i]/i)l^^jG) for any s e L(R) when \s\ = n. (3) \s\ = n + \ 




U {(T G Z„- I {{s]i n L{R))cr 
r\L{G) c L{R)] 



yi = [s]i; 
yi = Zdi- 



(12) 
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with s = Sicr. Since Sicr e L(R), we have Sicr e L(G). Then, there is x e a{xQ, Si) 
such that x' e a{x, cr). Moreover | j'll = n, we obtain that si e L{cliei(S i, (J/i)/^^jG. 
Because WieiSi is deterministic, there is Cyi,j2, ■•■ ,yn) e /3\\(yo\\, si) such that 
(x, Cvi,y2, • ■ • ,yn)) e o:'(Xq, Si). For i e I, we have yi = [si]i because sicr e L(R) 
and the definition of fit. Then, we obtain the following cases. (1) cr g 2„c. Because 
Si is Huci - compatible, we obtain that /3i(yi,(T) + and cr e ipiiyd- It implies 
there is {y\,y'^,--- ,3;;,) e je||((yi'3'2, • • • such that {x' ,{y\,y'^,- ■ ■ ,y'J) e 

«'(Cvi,y2, ■ ■ ■ ,yn),cr). Hence, s^a e Ucliei(S i,tf/i)/^fjG). (2) cr e 2^- If o" e Z„o,-, 
then e /3i([5i],-,cr). If cr ^ 2„o;, then [^icr],- e/3;([5i],-,cr) because 5icr e L(7?). 
Thus, there is (y[,y2, ■■■ ,y'„) e finiiyuyi, • ■ ■ ,yn), cr). Since 5icr e L(R) and D&A 
co-observability of L(R) with respect to L(G), So, and l,d, there exists ?' e / such 
that cr e 2„- and (P^ip^^^i) n L(i?))cr n L(G) c L(i?). It implies cr 6 i/^iCv;). There- 
fore, cr e U,g/(/f,(3;,) = ij/fd. Then, (jc', Cv'i,y2' " ' " '3^',)) ^ (^1,^2, • • • ,yn)), cr), 
which implies ^icr e L{cliei{S i, ijjdl^ffi). 

Thirdly, we prove that there exists a bisimulation relation between the su- 
pervised system and the specification. Because there is a bisimulation relation 
such that G\\det{R) =^ R, we have L(G\\det(R)) = L(R). In addition, we know 
L{cli^,iSi,iffi)/^f,G) = L{R) Thus, L{cli^,{S i^ifj^Uffi) = L{G\\detm = L(i?). 
Let (pi = {((x,y),q) \ 3s e L(R) s.t. y e /3||Cvoii, *), x e a{xQ,s), q e 6{qo,s), 
z e 6^{{qo},z) and ((x,z),q) e cp}. Similar to Theorem [H we can obtain that 

Remark 6. When the conditions of Theorem |2] hold, we can construct decen- 
tralized bisimilarity supervisors for the disjunctive architecture by ( fiOl) and 472]) . 
which is proved in the sufficiency part of Theorem |2] 



Remark 7. From nYoo (jr Lafortund \2002\} . D&A co-observability of L(R) with 



respect to L(G), (^nd 'Lob where i e I, can be verified by polynomial complexity 
with respect to \X\ and \Q\. According to Remark\5\ the computational complexity 
of verifying the existence condition of decentralized bisimilarity supervisors for 
the disjunctive architecture is 0(|Xp2'2''|S|/o^(|X|2'2')), which is exponential with 
respect to \X\ and \ Q\. 



6. General Architecture 

Under the general architecture, we explore the decentralized bisimilarity con- 
trol in this section. Then, the following Theorem [3] depicts the necessary and 
sufficient condition for the existence of decentralized bisimilarity supervisors for 
the general architecture. 
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Theorem 3. Given a plant G = (X, S, a, Xq, X,„) and a specification R = (Q,'L,6, qo, Qm) 
with L{R) c L(G), there is (Si,o;, Sun) - compatible supervisors Si = (5/, i/r/) with 
the general decision fusion rule if/fg such that cliei{S i, il/i)l^ffi = R if and only if 
the following conditions hold: 

(1) There is a bisimulation relation (p such that G\\det{R) =^ R; 

(2) L(R) is language controllable with respect to L{G) and 

(3) L{R) is said to be co-observable with respect to L{G), So,-, See,- and 'Lcdu 
where i e I; 

(4) R is marked language closed with respect to G. 

Proof. Consider det(R) = (Z, 2, 6z, {<?()}, Z,„) and G\\det(R) = (Xxz, 2, axz, (xo, {<?o}), X,nxz)- 

(Necessity) Similar to Theorem [T] and Theorem |2l we can prove that the ne- 
cessity part of this theorem. 

(Sufficiency) The local supervisors Si = (5;,i/^,) = {{Yi,'E,/3i,yoi,Y,ni),ifri) is 
designed as follows. The automaton 5, is as the same as (fTUl) and for any G 7,, 
the local decision map (/'/(y,) is defined as: 



S„c U See \ ^cei U {O- G Hcei \ 3s' G [s]i, s' a G L(i?)}U 

{cre^,,i\{Vs]ifM{R))cT(M{G)QLm y,- = M,-; (13) 



It can be seen that Si is (£„ors ^ud)- compatible and t/r, meeting the requirement 
of the general architecture. Let ij/fg^hQ the generalized decision fusion rule. 

Next, we would like to prove L{R) = L{cliei(S i, tffi) / ^^^G). Firstly, we verify 
that s G L(R) for any s e L{cliei(S i,il/i)/G) by the induction method. (1) \s\ = 
0, that is, s = 6. We have e e L{R). (2) Suppose that s e L(R) for any s e 
L(cliei{Si, ifJi)l^fG) when \s\ = n. (3) \s\ = n + l with s = Sicr. Assume that Sicr ^ 
L(R). Since sicr G L(cliei(S i, iffi)/^f^G), there is (x, Cvi, j2, ■ ■ ■ ,yn)) e a'(^o, ■^i) and 
crG2suchthat(A:',Cv'j,3;^,--- ,y'J) e a'((x,(yuy2, ■ ■ ■ ,yn)),o-). Then 5 icr g L(G) 
and cr G ifffg(yi,y2, • • • , j„). We have the following cases. Case 1: cr g S„c. Then, 
Sicr G L{R) because of the language controllability of L(R) with respect to L{G) 
and Thus, there is a contradiction. Case 2: cr e See- Then, cr e PceiP^iei^iiyt))- 
Since s\ G L(i?), we obtain = [^'i], for z G / by the definition of yS, and s\ G 
L(i?). Thus, either cr ^ See, or there is s\ e [si]i such that s\cr e L(R). That 
is, PT^Pi(si)o- n L{R) + 0. Therefore, L(i?) is not C&lP co-observability of with 
respect to L(G), Zo, and Zee,, where i G /. It introduces a contradiction. Hence, 
the assumption is not correct. As a result, s\cr e L{R). Case 3: cr g Ze^. Thus, 
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cr 6 PcdQ^iei^iiyd)- Because e L(R), we obtain j,- = [si],- for / e / by the 
definition of /3i and Si 6 L(R). Because cr e PcdQ^iei^iiyi)), there is / e / such that 
([■^i];)c n L(G) c L(i?). It implies s\cr e L(R). Then, there exists a contradiction. 
Therefore, the assumption is not correct, which implies sicr e L(R). 

As below, the induction method is also used to prove s 6 L{cliei{S i, if/dlti^ffi) 
for any s e L(R). (1) l^l = 0, that is, s = e. We have e e L(cliei(S i,if/i)/^^^G). 
(2) Suppose that s e L{cli^i{S i,if/i)l ^^.fi) for any s e L(R) when \s\ = n. (3) 
l^l = n + 1 with s = sicr. Since sicr e L{R), we have sicr e L(G). Then, 
there is x e a(xo,si) such that x' e a(x,cr). Moreover = n, we obtain 
si e L{cliei{Si, iffi)/^ffi). Because 11,6/5 is deterministic, there is Cvi, ji, • • • ,yn) 6 
AlCvoih ■^i) such that (x, (yuyi,--- e a'ix^, si). For i e I, we have y,- = [^i],- 
because sicr e L{R) and the definition of /3;. Then, we obtain the following cases. 
Case 1: cr e Because of - compatiblility of <S,-, we have /3i{yi,o-) + 
0. Further, cr e since cr e 2„c. It implies there is (/pyj'"' '^'m) ^ 

A((3'i'3'2, ••• ,yn),cr) such that {x' ,(y\,y\,- ■ ■ ,y'^) e a'(ix,(yx,y2,- ■ • ,3^„)),cr). 
Hence, ^jcr e LicU^iiS i^ip^l ^^G). Case 2: cr e 2,.^. If cr e E,,^/, then [^i],- e 
^■([■^i]!' cr)- If cr ^ then [^icr],- G ^i{\_sx\i,(f) because i'lcr e L(7?). Thus, there 
is {y\,y\, ■ ■ ■ G /3||(Cvi,j2, ■ ■ ■ ,Jn),cr). Since 5icr e L(i?), either cr e 2,.^,- or 
PT'Piis,)crnLiR) + 0. Therefore, cr e Pceif\i^i^i(yi)). Then, (x', (j;,);^, • • • ,3;;,)) e 
a'((^,Cvi,j2, ■ ■ ■ ,yn)),cr), which implies ^icr e L(c/,e/(5;, (/^,)/^^,^G). Case 3: cr e 
Serf- Similar to Case 2, we can prove that there i%{y\,y\, - ■ ■ , j,',) e /3||((y 1 , ■ ■ ■ > 
Since 5icr e L(K) and D&A co-observability of L{K) with respect to L(G), So, and 
Serf!, there exists / e / such that a e Zcdi and (Prip^^^i) nL(i?))cr nL(G) c L(i?). It 
implies cr e PcdCU/g/iA/Cj,)). Then, (x', (/pjj' ' " ' ^y'n)) ^ «''((^' (^1.^2, • • • , Jn)), cr), 
which implies 5icr e L(c/;s/(5,-, ijjdUffi)- 

Because there is a bisimulation relation such that G\\det{R) =^ R, we have 
L(G\\det{R)) = L(R). In addition, we know L(cli^j(S i,il/i)/^^G) = L(i?). Thus, 
L{cli^,{SMI^fG) = L{G\\det{R)) = L{R). Let 0i = {((x,yiq) \ 3s e L(i?) s.t. 
y 6 ;8||(yo||, *), X £ a{xQ, s), q 6 6{qQ, s), z e S^({qo}, z) and {{x, z), q) e (p). It can be 
easily obtained c/,e/(5,-, if/dl^ffi -.^lU^-' ^• 

Remark 8. 5mce C&.P co-observability and D&A co-observability are the spe- 
cial cases of co-observability, the result of Theorem\3\for the general architecture 
generalizes the results of Theorem [7] and Theorem |2] Moreover, decentralized 
bisimilarity supervisors can be designed by using HUii and dT?l ) for the general 
architecture. 
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storage station 1 




Figure 1 : Manufacturing System 




Figure 2: Plant G (Left) and Specification R (Right) of Example 1 



Remark 9. Refer to Remark \5\ and Remark [2 the computational complexity of 
verifying the existence condition of decentralized bisimilarity supervisors for the 
general architecture is 0(|Xp2'2l |2|/o^(|X|2'2')), which is exponential with respect 
to \X\ and \Q\. 
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7. Illustrative Examples 



In this section, four examples are provided to demonstrate the proposed re- 
sults. 



Example 1. Consider the following manufacturing example adopted from AZhou Kumar 
[2007) . A manufacturing system consists of a home location, a work location, three 
storage stations and three robots, which is shown in Fig. [7] Robot T is available at 
its home location to traverse on one of the two rails. Traversal on Rail i (i =1,2) 
is randomly chosen and is denoted by event a. While Robot T is on Rail i, it can 
pick a part from Storage i (event bi) or Storage (z + 1) (event bj+i), and then it takes 
the part to work location for processing (event c). When returning. Robot T can 
nondeterministically choose a Rail-i and drop the part to either Storage i (event 
dj) or Storage (i + 1) (event dj+i) and returns to its home location. Robot 1 and 
Robot 2 can monitor and supervise the manufacturing process. 

The control specification requires that a part be returned to its original pickup 
location except the parts picked up at Storage 1 (respectively Storage 3) can also 
be returned to Storage 3 ( respectively. Storage 1 ), as those parts are exchangeable. 
The specification also requires that Robot T always be able to return to its home 
location (which means that the state representing the home location is the only 
marked state ). Models G and R of the manufacturing system and its specification 
are given in Fig. |2] 

Suppose Sol = {a,c,bi,b2,dud2}, S^i = {a, c, Z?3, ^3}, S^i = {bub2,dud2,dj,} 
andS,.2 = {b3,d^}. Then, l^uc = {a,c},Z„c i = {a, c,b 3} and I,uc2 = {a,c,bi,dub2,d2 }. 
For this example, we obtain that L(G) = (ab^cadia + ab\cad2a + abicadsa + ab2 
cadia + ab2cad2a + ab2cadT,a + ab^cad^a + abT,cad2a + abjiCad^a)* and L{R) = (a 
b\cad\a + abicadsa + ab2cad2a + abscadia + abscad^a)* . It can be seen that L{R) 
is controllable with respect to L(G) and 2„c and L{R) is C&P co-observable with 
respect to 2„ and So,, where i = 1,2. In addition, we can obtain det{R) (Fig. |4] 
(Left)), which implies there is a bisimulation (p such that G\\det{R) =^ R. Ac- 
cording to Theorem [U there exist decentralized bisimilarity supervisors for the 
conjunctive architecture. 

Then, Si and S2 can be constructed as below. The automata S 1 and S 2 can 
be found in Fig. [31 Further, the local decision maps iffi and 1/^2 are described as 
follows. 



21 




Figure 3: The Automata of Si (Left) and ^2 (Right) of Example 1 



<Ai(j) 



{a,c, Z73} 
{a,c,bi,b2,bi,} 
{a,c, Z73, Ji, J3} 
{a,c, b3,d2} 



y = 0,2,3A,5,S,9,z,u 
y = U 
y = 6; 
y = l. 



y = Q',T,y,5\zd2\ 

y = y; 
J = 4'; 



{a,c,bub2,di,d2} 
tffiiy) = • {a,c,bub2,bi„dud2} 
{a,c,bi,b2,di,d2,dT,} 

Then, the supervised system is shown in Fig. |4] (Right). It can be verified that 
cl{Si,S2)Uffi =^,u<p-' where 01 = {((jcq, 0, 0'), <?o), ((-^i, 1, 1'), ^1), (fe, 1, 1'), ^2), 
((X3,2, l'),<?3),(fe,2, l'),<?5),(fe,3, l'),<?4),(fe,3, r),^6),((A, 1,3'), ^3), ((^4, 
1,3'), <?5), ((a, 3, 1'), q^), {(X4, 3, 1'), qe), (fe, 4, 2'), ^7), (fe, 5, 2'), ^8)((-^6, 6, 4'), 

^9), ((JC6, 7, 4'), <?!!), ((JC6, V, 4'), <5ri2), ((Xy, 6, 4'), <?lo), ((-^7, 7, 4'), (^n), ((Xj, 7, 4'), (712), 

((X8, 8, 4'), ^13), ((.)C9, 6, 5'), ^13), ((.^8, 9, 4'), ^13), ((^9, 9, 4'), ^13), ((xs, 8, 4'), ^14), 
((X9, 6, 5'), ^14), ((JC8, 9, 4'), ^14), ((.)C9, 9, 4'), qu)} and i/^/c is defined as 

If we consider det{R) (Fig. |4] (Left)) as the specification, it can be seen that 
G\\det{R) is not bisimilar to R. Therefore, we can not find a solution for the 
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Figure 4: det(R) (Left) and Supervised System cl{S\,S2)l ^ffi (Right) of Example 1 



decentralized bisimilarity control problem. However, we can achieve the lan- 
guage equivalence for the decentralized control problem since L{R) is C&P co- 
observable with respect to L(G), So, and 2„ for i = 1,2. Hence, the decentralized 
control for language equivalence is easier the decentralized control for bisimula- 
tion equivalence. 

Example 2. Consider a plant G and a specification R, which are shown in Fig. 
|5] Assume i =1,2, = {a,c,d,e, f), Hoi = {b,c,d,e, f], = {c,e, f,g] and 
2c2 = {d,e,f,g}. We could like to design decentralized supervisors Si and S2 
with a global decision rule ij/f such that cl{S 1,82) I ij^fG = R. 

For ^ e Sci n 2^2, we have g e L{G) - L(R), b e P'^Piie) and a e P^^Piie) 
such that ag, bg e HR), where i = 1,2. Therefore, L{R) is not CSlP co-observable 
with respect to L(G), So/ and S^,, where / = 1,2. Thus, there does not exist a set of 
decentralized bisimilarity supervisors for the disjunctive architecture. However, 
L{R) is DSlA co-observable with respect to L(G), So/ and S^, where i = 1,2. More- 
over, L{R) is language controllable with respect to L(G) and E„c and G\\det{R) = R. 
It implies the existence of decentralized supervisors for the disjunctive architec- 
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Figure 5: Plant G (Left) and Specification R (Right) of Example 2 




Figure 6: The Automata of .Si (Left) and S2 (Right) of Example 2 



ture to achieve the bisimulation equivalence between the supervised system and 
the specification. 

Decentralized bisimilarity supervisors Si = and S2 = (52, (^2) are 

designed according to (flOl) and (fT2l) . in which S 1 and S2 are shown in Fig. [6] and 
1/^1 and 1/^2 are presented as below. 
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{a,b,c,e} 


y = 0; 


{a,b,e,g} 


y = 3; 


{a,b,d} 


y = h 


{ci,b,f} 


J = 4; 


. {a,b} 


J = 2,5,6, 


{a,b,c,e} 


y = 0'; 


{a,b,g,e} 


y = y; 


{a, b, d] 


y = y; 


{a,b,f} 


y = 4'; 


. {a,b,c} 


J = 2', 5', 6 




Figure 7: det(R) (Left) and Supervised System cl(Si,S2)/,/,fjG of Example 2 



With Si and S2, we obtain the supervised system cl{S\,S2)l ,pffi (Fig. |7] 
(Right)), where i/ryy is defined as®. Let(/>i = {((.jcq, 0, 0'), <?o), ((^2, 1, 1'), <?i), ((^1, 1, 
1'), qiX ((^3, 3, 0'), ^3), ((^3,0, 3'), ^3), ((-^6, 4, 4'), ^4), ((^7, 3, 0'), ^5), ((^7, 0, 3'), ^5), 
((jC8, 6, 6'), q(y), {{x%, 6, 6'), qi), ((^9, 5, 2'), q^), ((^9, 5, 2'), <?7), ((-^9, 2, 5'), <?6), ((-^9, 2, 5'), ^7)}- 
Therefore, cKSi,S2)l ^^fi =^,u^-' R. 

Example 3. Consider a plant G and a specification R, which are shown in Fig. 
ID Let i =1,2, Sol = {a,c], 2o2 = {b,d}, 2^1 = {g,e} and'Zci = {g,c,d}. The aim 
of control is to design decentralized supervisors S\ and S2 with a global decision 
fusion rule ij/f such that cl{Si,S2)l ^fG = R. 
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Figure 8: Plant G (Left) and Specification R (Right) of Example 3 




Figure 9: The Automata of Si (Left) and S2 of Example 3 

For ^ e n Ec2, we have g e L(R). However, there exist bg e [(P:^^Pi(e) n 
LiR))g n L(G)] and ag e [(P-^P2(e)g n L(R))o- n L(G)] such that ag,bg i UK). 
Therefore, L(K) is not D&A co-observable with respect to L(G), Eo, and S,,, where 
/ = 1,2, which implies there does not exist a set of decentralized bisimilarity 
supervisors for the disjunctive architecture. 

However, L(K) is C&P co-observable with respect to L(G), So, and In 
addition, G^detiK) = R and L(R) is language controllable with respect to L{G) and 
2„c and det{R) is in Fig. [10](Left). Therefore, there exist decentralized bisimilarity 
supervisors for the conjunctive architecture. 
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Figure 10: det(R) (Left) and Supervised System cl{S 1,82) I ipffi of Example 3 



Refer to (flOl) and ([TT]) . we can design decentralized supervisors S\ = {S 
and S2 = (Sj, ^2) as shown in Fig. HI The supervised system cl{S\,S2)l ,pffi can 
be seen in Fig. I10[ where ipfc is defined as (131). Therefore, cl{S\,S2)l ipffi — ^lU^s ' 
7?, where 01 = {((xo,0,0'),^o),((-^i,0,0'),^i),((^2,0, l'),<?2), (fe, l,0'),^3),((-^4, 1, 
0'), q,), (fe, 0, 2'), ^5), ((^7, 2, 0'), ^5), (fe, 0, 2'), qe), ((xy, 2, 0')), ^e), (Ui, 0, 0'), <?4), 

((X4,l,0'),^l)}. 




Figure 1 1 : Plant G (Left) and Specification R (Right) of Example 4 



Example 4. Consider a plant G and a specification R, which are shown in Fig. 
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[771 Let i =1,2, Sol = {b,e}, = {c,d}, Z^i = {a,f,e} and'Zci = {(^,f}- In the 
following, we investigate the problem whether there exist decentralized supervi- 
sors S\ and S2 with a global decision fusion rule ij/f such that cl{Si,S2)l ^fG = R 
or not. 




Figure 12: Decentralized Supervisors Si (Left) and S2 (Right) of Example 4 

For a e n 1,^2, we have a i L(R). However, there exist c e P'^^Pi(e) and 
b e P^^Pjie) such that ca,ba e L(R). Thus, L{R) is not C&P co-observable with 
respect to L(G), Zo,- and Ec,-, where i = 1,2. 

On the other side, we have / e L(R), cf e [(P-^Piie) n L{R))f n L(G)] \ L(R) 
and bf e [{P-^P2(6) n L(R))f n L(G)] \ L(R) for / e 2,i n 1,2- Therefore, L(7?) 
is not D&A co-observable with respect to L{G), So/ and 2„, where i = 1,2. By 
Theorem [Hand Theorem [21 there does not exist a set of decentralized bisimilarity 
supervisors for both the conjunctive architecture and the disjunctive architecture. 

Let 2 = See U E,.,/, where l,ce = {/, e} and = {a}. Then, = n Z^i = 

{/, e), ILcel = ^ce n 2c2 = {/}, ^cd\ = S„/ Pi Scl = {«} and £,.^2 = ^cd H Sc2 = {«}• 

It can be easily verified that L{R) is co-observable with respect to L(G), So,, See; 
and 'Lcdi, where / = 1, 2. In addition, L{R) is language controllable with respect to 
L(G) and E„f and G\\det{R) = R. Therefore, we can find decentralized bisimilarity 
supervisors for the general architecture. 

Next, decentralized supervisors S\ = {S and S2 = (S 2,1^^2) are designed 
by using ([TOI ) and ([T3l ) in Fig. [121 It can be seen that cl{Si,S2)l ^^fi -<i>i^r^ ^ 
(Fig. m, where 0i = {((xq, 0, 0'), ^0), ((^4, 1,0'), qi\ (te, 1,0'), ^2), (fe, 0, 1'j, ^3), 
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Figure 13: det(R) (Left) and Supervised System cl{S\,S2)l ipffi of Example 4 



((X5, 0, 0'), ^4), ((-^6, 1 , 0'), ^5), ((-^8, 0, 1'), q^), {{xn, 1 , 2'), qi), ((-^n, 0, 1')), q^), ((-^12, 
1,2'), ^s), ((-^13, 0, 1')), qi), ((^4, 1,0'), <?4), (fe, 0, 0'), <?!)} and ij/fg is defined as ©. 

8. CONCLUSIONS 

The decentralized bisimilarity control of discrete event systems was studied 
in this paper, where the plant and the specification are modeled as nondetermin- 
istic automata and the supervisor is modeled as a deterministic automaton. To 
formally capture bisimulation equivalence, we propose an automata-based frame- 
work, upon which a conjunctive architecture, a disjunctive architecture and a gen- 
eral architecture were constructed for decentralized bisimilarity control with re- 
spect to different decision fusion rules. Then, necessary and sufficient conditions 
for the existence of a set of 2„c, - compatible and - compatible bisimilarity 
supervisors were presented respectively under above three architectures. It was 
shown that these conditions can be verified with exponential complexity. Fur- 
thermore, when the existence condition holds, we provided a synthesis method to 
design the decentralized bisimilarity supervisors. 

With the results of this paper, we can further investigate the synthesis of su- 
permal/infimal subspecifications when the existence conditions are not satisfied. 
In addition, we can also study the decentralized bisimilarity control problem by al- 
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lowing nondetemiinistic supervisors under the proposed framework. These prob- 
lems will be considered in our subsequent work. 
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